default group

default group


A target group to which a forwarder routes event data when the data does not fit into other defined target groups.

For example, you can arrange to route all events with the word "error" in them into one target group, route all events with a sourcetype of syslog to a second target group, and route all remaining events to a default group.

For more information

In Forwarding Data: